{"id":3904969,"url":"https://alion.io/job/pbc-solutions-senior-security-analyst","title":"Senior Security Analyst","company":{"id":2540801,"name":"PBC Solutions","domain":"pbcsolutions.ca","url":"https://alion.io/company/pbcsolutions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"CATS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Victoria, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":76800,"max":115200,"currency":"CAD","period":"year","gross":null,"usd_annual":82320},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"OWASP Top 10","optional":true}],"status":"live","first_seen_at":"2026-11-07T02:33:43Z","employer_posted_date":"2026-11-07","last_verified_at":"2026-11-09T04:18:49Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"PBC Solutions is looking for a full-time Senior Security Analyst!\nPlease note: PBC Solutions is headquartered in Saanichton, BC (a suburb of Victoria) and also has offices in Burnaby. We operate in a hybrid in-person and virtual environment. The successful candidate must be based on southern Vancouver Island or in the Lower Mainland, with regular office presence required. Preference will be given to candidates based in the Greater Victoria area.\nAbout PBC Solutions:\nPBC Solutions has been recognized as one of British Columbia's Top Employers for 2026!\nPBC Solutions Ltd. is a wholly owned subsidiary of PBC Health Benefits Society. We provide solutions for benefit services with administration, technology, and innovation to improve efficiency, accuracy, and customer experience. PBC Solutions administers Health Insurance BC Services on behalf of the BC Ministry of Health, including medically necessary insured doctor services through the Medical Services Plan (MSP) and drug coverage through the PharmaCare and Fair PharmaCare programs.\nWhile the initial focus of the role will be on delivery of BC Ministry of Health-related projects, efforts may expand to additional public and private client work.\nPosition Summary:\nReporting to the Manager, Information Security, the Senior Security Analyst is PBC Solutions’ primary in-house resource for conducting Security Threat and Risk Assessments (STRAs). The role scopes, performs and documents STRAs for new and changing systems, services, vendors and technology-enabled business processes that support PBC Solutions’ health-benefits administration services, and produces clear, defensible risk findings and recommendations for business owners and leadership.\nThe analyst completes routine and moderate STRAs end to end and coordinates with specialist assessment partners on more complex engagements. Secondary responsibilities include supporting security reviews of AI-enabled and application initiatives, validating controls in the Microsoft security environment (including Microsoft Defender), and improving the STRA process, templates and tracking.\nKey Accountabilities:\nSecurity Threat and Risk Assessments (approx. 65%)\nLead STRAs from intake to approval: work with various groups to confirm scope, identify information assets, data flows and trust boundaries, and determine assessment depth.\nGather and review evidence from project teams, vendors and service providers; identify threats, vulnerabilities and control gaps.\nDevelop and maintain guidance, templates, and supporting materials to facilitate the STRA process for project teams.\nAssess, track and rate risk, write clear risk statements, and recommend practical, proportionate safeguards.\nDocument residual risk, risk-acceptance decisions, exceptions and conditions of approval, and track treatment actions to closure.\nApply applicable BC Government IM/IT standards (including the STRA standard), contractual security obligations and PBC Solutions policies.\nWork alongside Privacy on related Privacy Impact Assessments so security and privacy findings are aligned.\nCoordinate with external assessment partners on complex STRAs, including scoping, progress status, quality review and integration of their findings.\nMaintain the STRA register and status reporting for the Information Security team and leadership.\nSecurity Reviews for AI, Application and Vendor Initiatives (approx. 15%)\nProvide security input on AI use cases, pilots and procurements using PBC Solutions’ AI governance and security review checklists.\nReview application security considerations such as authentication, access control, data protection, secure configuration and integration points.\nSupport vendor and SaaS/cloud security due diligence and follow up on remediation commitments.\nSecurity Controls and Microsoft Security Environment (approx. 10%)\nUse Microsoft Defender and related Microsoft 365 and Azure security tools to validate controls, gather evidence and inform risk ratings.\nReview security alerts, findings and reports as assigned, and coordinate remediation with operational owners and service providers.\nProcess Improvement and Stakeholder Coordination (approx. 10%)\nImprove STRA intake, templates, workflows and tracking so assessments are consistent, timely and measurable.\nTranslate security requirements into clear actions for project, business and technical stakeholders, and escalate risks or blockers promptly.\nRequired Education and Experience:\nBachelor’s degree in computer science, information technology, cybersecurity, risk management or a related field, or an equivalent combination of education and experience.\nFive or more years of progressive experience in information security, technology risk, IT audit or a related field.\nDemonstrated hands-on experience conducting security threat and risk assessments (or equivalent technology risk assessments) and writing defensible findings and recommendations.\nExperience assessing cloud, SaaS and vendor-provided solutions.\nExperience working with technical, business and vendor teams in a regulated or public-sector environment.\nPreferred Qualifications:\nCISSP and/or CCSP certification is considered a valuable asset; other recognized security or risk certifications (e.g., CISM, CRISC, GIAC) are also an asset.\nBackground in AI security, including assessing AI-enabled or machine-learning solutions, data handling and AI-specific risks, is a value add.\nRelevant Microsoft security certifications are a nice to have, such as Microsoft Certified: Information Security Administrator Associate (SC-401, Microsoft Purview) and Microsoft Certified: Security Operations Analyst Associate (SC-200, Microsoft Defender).\nWorking knowledge of Microsoft Defender and Microsoft Purview and the broader Microsoft 365 / Azure security stack.\nKnowledge of application security practices, such as OWASP Top 10, secure design review, threat modelling and API security.\nExperience with the BC Government STRA standard or other public-sector risk assessment frameworks.\nExperience in healthcare, benefits administration or other environments handling sensitive personal information.\nKnowledge, Skills, and Abilities:\nStrong knowledge of security risk assessment methods and control frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001/27002 and NIST SP 800-30.\nSound understanding of identity and access management, network and cloud security, data protection, encryption, logging and vulnerability management.\nAbility to read architecture diagrams, data flows and vendor security documentation and quickly identify key risks.\nExcellent written communication; able to produce concise, decision-ready assessments for technical and non-technical readers.\nAbility to manage several assessments at once, prioritize effectively and meet deadlines with limited supervision.\nRequired Competencies:\nAnalytical judgement: Weighs incomplete or competing information and reaches clear, risk-based conclusions.\nCommunication: Writes clear assessments and explains risk in plain language to business owners and leaders.\nCollaboration: Builds productive working relationships with project teams, vendors and partners without relying on formal authority.\nAccountability: Keeps accurate records, follows through on commitments and escalates risks or blockers promptly.\nContinuous improvement: Looks for practical ways to simplify, standardize and strengthen the assessment process.\nTravel/Work Location:\nPBC Solutions is headquartered in Saanichton, BC (a suburb of Victoria) and also has offices in Burnaby. We operate in a hybrid in-person and virtual environment. The successful candidate must be based on southern Vancouver Island or in the Lower Mainland, with regular office presence required. Preference will be given to candidates based in the Greater Victoria area.\nWhat's in it for you\nWe offer market competitive total compensation, including an annual incentive bonus plan and market-based salaries. The base salary range for this position is $76,800 - $115,200. Placement in the salary range will be determined by the level of experience and expertise based on corporate guidelines, with the goal to ensure market competitiveness and internal equity. \nWe offer a robust health & dental benefits plan, with flexible options that will meet you and your family's needs. We also offer generous vacation and paid leaves along with a Defined Benefit Pension Plan (PSPP), for all eligible employees. \nWe strive to create a workplace where everyone feels valued and employees feel empowered to freely participate and contribute regardless of race, ethnicity, gender or gender identity, sexual orientation, religion, ability, education level, parental status, or socioeconomic status. \nPBC Solutions is an equal opportunity employer and welcomes applications from all qualified candidates. \nTo request an accommodation in completing this application, pre-employment testing, interviewing or otherwise participating in the employee selection process, please direct your inquiries to  \nDoes this opportunity resonate with you?\nAre you seeking a work environment that will challenge you, provide stretch opportunities, and support your success and growth? Then you've found your ideal work environment - Apply today please! We'd love to talk with you to explore this opportunity further with you. \nPlease note, if selected for this opportunity, you will be required to undergo a background check in accordance with PBC Solutions policies. \nWe sincerely thank all candidates for their interest, however only those selected to continue in the recruitment process will be contacted.\nThis posting will be open until filled. We will start reviewing applications on November 23, 2026, and will continue to receive applications until the position is filled\nHow we work:\nOur Guiding Principles\nHonesty - We will be truthful. We will create a safe environment to communicate proactively, openly and with respect. We will be transparent and genuine with our interests. \nIntegrity - We will act consistently to do the right thing and ensure our words and actions align. Embracing opportunities and challenges, we will live our shared values and vision. \nReciprocity - We will strive for fair and balanced exchanges leveraging our unique strengths and resources, recognizing this requires an ongoing give and take. We will win and lose as one. \nAutonomy - We respect and acknowledge the interests of each party. We trust each other to make decisions and act based on our diverse strengths to achieve our mutually desired outcomes. \nLoyalty - We will be bold, brave, and committed to our relationship. As partners, we will advocate for one another, celebrate our successes, and have each other’s back through our challenges. \nEquity - We commit to a balanced partnership. We will make decisions and act based on a fair assessment of capabilities, risks, constraints, and opportunities to achieve mutual success. \nOur Intended Behaviours\nCommunication - We actively communicate in a timely, open, respectful, and responsive manner with the intent to gain understanding and find solutions. \nFlexibility - We will be agile, adaptable, and creative to enable responsive service delivery and embrace challenges and change with an open-minded and positive attitude. \nPerspective - We seek to understand interests, assumptions, actions, and diverse backgrounds by actively sharing and exploring all points of view. \nFocus - We will use our Shared Vision as our North Star to evaluate, prioritize, and deliver successful results. \nTrust & Confidence - We lead with trust. We consistently behave in ways that earn and inspire confidence by being credible, reliable, and transparent even when vulnerable. \nFeedback - No surprises. We will maintain a strong relationship through timely, purposeful feedback in a safe, respectful, and collaborative environment. \nSolution-oriented - We see possibilities rather than limitations. We use our diverse capabilities...","description_format":"text","description_chars":12046,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Generous vacation","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-11-07T02:33:43Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["conf:2","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":82320,"is_top_pay":false},"html_url":"https://alion.io/job/pbc-solutions-senior-security-analyst","json_url":"https://alion.io/job/pbc-solutions-senior-security-analyst.json","meta":{"generated_at":"2026-11-09T04:39:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4120,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2540801},"rest":"https://alion.io/mcp/rest/get_company?id=2540801"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpbc-solutions-senior-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpbc-solutions-senior-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpbc-solutions-senior-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pbc-solutions-senior-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpbc-solutions-senior-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3904969}},{"tool":"search_jobs","arguments":{"company":"pbcsolutions.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3904969},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}